Lucene search
K

4 matches found

OSV
OSV
added 2023/12/13 3:15 p.m.2 views

CVE-2023-6758

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /adplanet/PlanetCommentList of the component API. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit...

4.3CVSS5.4AI score0.00118EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/12/13 2:31 p.m.16 views

CVE-2023-6758 Thecosy IceCMS API PlanetCommentList access control

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /adplanet/PlanetCommentList of the component API. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit...

5.3CVSS5.7AI score0.00118EPSS
Exploits1References3
CVE
CVE
added 2023/12/13 2:31 p.m.32 views

CVE-2023-6758

The CVE-2023-6758 entry affects Thecosy IceCMS 2.0.1, specifically the API endpoint /adplanet/PlanetCommentList. The issue is an improper access control in an unknown functionality of that API component, with remote exploitation possible and public disclosure of the exploit. Multiple sources corr...

5.3CVSS4.8AI score0.00118EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2023/12/13 12:0 a.m.1 views

IceCMS Access Control Error Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. An Access Control Error vulnerability exists in Thecosy IceCMS version 2.0.1, which stems from the presence of an unknown function in /adplanet/PlanetCommentList in...

5.3CVSS6.8AI score0.00118EPSS
Exploits1References4
Rows per page
Query Builder